How does the EVM having a limited number of 'call steps' stop a repeating attack from working if it tries to go too deep?

The term 'call steps' in the Ethereum Virtual Machine (EVM) primarily refers to the consumption of 'gas,' which is a unit of computational effort. Every operation performed by a smart contract, including data manipulation, calculations, and especially external function calls to other contracts, consumes a specific amount of gas. Each transaction submitted to the Ethereum network must specify a 'gas limit,' which is the maximum amount of gas that transaction is permitted to consume. A repeating attack, such as a re-entrancy attack, works by a malicious contract repeatedly calling ....